Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa
File: 8d49b5f3-420f-3eb8-b537-40a6e2988035.roa (raw, json)
Hash identifier: nKgbAOjKOhSbur8yzLZaWKq+6fKPFOKUG0HALoT2Jk0=
Subject key identifier: A3:8C:66:24:7F:69:E2:F4:AE:67:41:24:80:08:A3:A2:EA:CB:E3:F7
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F43285848530AE53F09240E3A1B4A4940
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 13213
IP address blocks: 209.95.32.0/20 maxlen: 24
209.95.48.0/23 maxlen: 24
209.95.53.0/24 maxlen: 24
209.95.54.0/23 maxlen: 24
209.95.56.0/24 maxlen: 24
209.95.58.0/23 maxlen: 24
209.95.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:e5:3f:09:24:0e:3a:1b:4a:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=a910df08-d106-4976-8e74-9563f622d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:38:a3:78:58:86:64:02:52:77:d4:18:d2:
87:a1:f6:e1:0d:39:83:60:aa:af:de:bf:02:75:10:
3c:67:42:a6:80:44:c1:7c:e1:4a:60:29:c8:41:76:
bb:1e:a8:8b:64:64:ea:34:13:02:3c:49:f2:24:72:
36:2b:8a:f7:93:99:fc:7c:db:32:98:7c:69:35:17:
41:c1:2c:67:00:87:6b:fa:95:bc:71:ec:0e:43:11:
cd:d1:47:98:4a:e8:6c:e6:9e:1c:15:ec:a3:51:84:
71:f3:ca:1f:67:c9:49:0b:04:a4:33:1f:88:be:b8:
17:57:4e:30:c6:db:0d:aa:af:b4:e0:70:1d:01:29:
9e:a3:22:72:40:77:79:66:62:bc:3d:9a:7e:59:ed:
52:26:1c:36:7f:f8:26:77:f5:0b:dd:8d:50:f4:20:
95:2a:80:4e:48:2c:91:00:ec:10:8b:02:c4:8f:46:
b5:71:d6:2d:2e:ac:ed:a6:03:fd:7e:26:b9:04:c1:
bd:ca:78:52:5c:b7:74:e3:e3:a7:b4:00:c7:6d:38:
55:2b:18:35:9c:b9:cd:42:e4:f4:bc:77:bd:a3:c3:
de:d9:b1:92:a3:05:d9:19:92:83:68:3c:3b:d1:ae:
6b:7e:92:53:04:98:14:70:e4:b0:be:78:a2:8a:ce:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:66:24:7F:69:E2:F4:AE:67:41:24:80:08:A3:A2:EA:CB:E3:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8d49b5f3-420f-3eb8-b537-40a6e2988035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.95.32.0-209.95.49.255
209.95.53.0-209.95.56.255
209.95.58.0/23
209.95.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:bd:55:e3:8f:04:ba:d9:fb:96:65:50:ee:07:aa:13:71:2c:
0b:1a:18:55:ab:75:3c:bd:c1:42:e4:29:d5:2c:c6:d9:cb:17:
46:0a:10:20:de:12:e6:4c:e9:64:5d:c1:8a:00:6f:f2:1e:da:
03:c3:aa:94:ce:be:43:44:e8:e6:f6:69:af:19:8e:02:2b:d4:
97:ce:e6:54:ee:89:bd:77:55:73:bb:57:8d:ec:ce:b8:55:23:
b8:88:2c:c8:d2:b9:c0:93:e9:b6:0f:cf:6b:9c:af:45:8f:a3:
5d:7a:d3:2f:29:8b:a9:52:cc:18:54:54:04:b6:d8:4e:84:ec:
a0:a0:a9:63:c8:ec:d7:0b:cd:b8:92:9e:0e:20:a0:e6:b5:b3:
16:5d:c9:96:fd:60:31:d7:ae:40:48:eb:5b:91:fa:be:e4:3e:
9c:88:f3:30:47:8b:9a:ae:94:bd:c7:10:34:16:de:bf:e6:8f:
ba:8c:de:ee:eb:49:23:07:0c:9f:ae:bf:64:69:cf:78:7d:bc:
f0:e9:2e:cf:70:e8:31:4c:cb:1b:d6:21:7c:90:70:0f:be:96:
f7:0b:96:06:85:ee:c8:31:c4:f0:ed:c0:c5:40:12:ac:65:60:
bd:eb:8f:6b:32:c3:c0:86:6b:cc:45:82:1f:8b:e1:7b:fa:43:
c0:39:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:50:07 2025 by rpki-client